Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5BFEB198575C11F18A9E2BACCE1D38B0.roa
File: 5BFEB198575C11F18A9E2BACCE1D38B0.roa (raw, json)
Hash identifier: sLejhWu2+0pv2DRgBsPrHQvhq2Rj9FGPu2jihCMst+U=
Subject key identifier: 20:DD:86:74:57:32:5C:DE:B4:3B:01:65:6E:33:73:8D:AB:1F:F9:BF
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1F6A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5BFEB198575C11F18A9E2BACCE1D38B0.roa
Signing time: Sun 24 May 2026 10:36:02 +0000
ROA not before: Sun 24 May 2026 10:35:57 +0000
ROA not after: Wed 24 May 2028 10:35:57 +0000
asID: 199186
IP address blocks: 154.16.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 May 2026 00:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8042 (0x1f6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: May 24 10:35:57 2026 GMT
Not After : May 24 10:35:57 2028 GMT
Subject: CN=6a12d492-592a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:77:0d:c8:ab:11:f4:1b:15:34:e5:14:a0:
18:ce:b7:67:70:a2:47:00:56:86:5a:66:5c:c6:37:
c8:e7:43:f6:aa:a0:33:95:75:31:19:e6:b1:30:af:
39:5a:28:ee:6e:bf:12:6d:1c:e9:3e:66:67:46:54:
e5:7e:3d:9e:f0:54:a0:35:e3:ed:40:e4:1f:fa:27:
0a:d8:74:53:ec:1c:6c:f2:4e:ad:8c:17:40:fc:61:
56:8b:4d:3d:1b:ae:85:98:a7:93:98:13:ac:96:f6:
f4:39:16:e2:e6:f4:ec:f4:71:be:0a:70:d4:45:f0:
ab:e3:28:73:c8:f1:d2:3a:a1:98:53:5c:7d:c9:45:
41:60:78:5a:b3:a8:60:7e:62:a6:2c:66:cd:b4:f3:
12:47:fa:a3:c7:9b:c1:0d:93:b0:92:4e:d8:6d:36:
e5:d8:6a:81:ac:22:3c:dc:3c:27:2e:1f:cb:3d:2e:
0f:75:1b:e6:fe:5c:32:1f:e7:a0:87:d9:ec:9e:b5:
eb:30:f3:dd:f5:ea:da:00:3a:36:df:79:8d:97:5a:
cc:27:86:ea:d7:a9:8f:f6:91:9f:a9:d9:a1:50:15:
8d:49:e3:f1:f9:cc:6f:fe:f2:05:16:3d:39:45:d9:
89:5c:6c:d1:3d:00:17:8d:a4:63:66:83:99:99:ef:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:86:74:57:32:5C:DE:B4:3B:01:65:6E:33:73:8D:AB:1F:F9:BF
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5BFEB198575C11F18A9E2BACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.16.0/24
Signature Algorithm: sha256WithRSAEncryption
97:16:47:2d:78:23:2e:56:43:50:2d:a9:18:16:84:a3:e1:e0:
96:6e:6c:b4:27:30:77:34:7e:db:14:80:7b:47:cd:84:b0:f0:
a5:48:e2:66:ba:49:b5:0c:16:4c:c1:d7:a0:c0:8d:be:5b:43:
33:6f:d0:bb:4a:30:07:5d:0d:69:bd:0a:5f:05:3f:0a:e9:94:
b8:3b:ae:22:ba:4d:fe:08:06:4f:4a:57:70:4e:3e:59:33:be:
f5:33:f8:64:ba:65:47:ce:f8:fb:c4:f8:fc:77:39:71:2c:38:
ed:7d:e0:0d:81:f4:ff:ec:a0:2e:43:a6:4f:ca:6f:4c:28:47:
b7:72:83:d6:76:b4:6a:b4:8a:0d:1e:7b:da:ba:ce:ca:0c:00:
92:30:bd:7e:47:d0:c7:01:ec:13:98:ed:ca:5a:82:4d:57:28:
12:3c:65:7a:02:c7:fb:04:12:fa:69:4e:b8:76:dd:bf:a5:e9:
07:b8:d3:d9:d0:b6:80:4b:bd:c1:91:71:a7:e2:f5:b3:3f:f8:
f3:e4:fd:66:d1:27:2e:17:34:fd:a7:fa:16:81:46:6d:9a:12:
b9:e1:7c:d7:9b:5d:e9:a4:b4:ec:3e:91:e2:bf:b4:97:07:10:
df:09:c0:26:fd:45:f7:c3:57:ee:71:69:6c:84:34:ec:93:37:
fb:30:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 04:22:44 2026 by rpki-client